|
| 1 | +## Release [v10.0.2](https://github.com/sourcefuse/loopback4-audit-log/compare/v10.0.1..v10.0.2) August 16, 2026 |
| 2 | +Welcome to the August 16, 2026 release of loopback4-audit-log. There are many updates in this version that we hope you will like, the key highlights include: |
| 3 | + |
| 4 | + - [](https://github.com/sourcefuse/loopback4-audit-log/issues/173) :- [fix(deps): move loopback and core packages from peer to direct deps ](https://github.com/sourcefuse/loopback4-audit-log/commit/e47b0f870cd955a197cc28d9c080320caf4c0081) was commited on August 16, 2026 by [Piyush Singh Gaur](mailto:piyush.singh@sourcefuse.com) |
| 5 | + |
| 6 | + - * fix(deps): move loopback and core packages from peer to direct deps |
| 7 | + |
| 8 | + - - remove the peerDependencies block and declare @loopback/boot, |
| 9 | + |
| 10 | + - @loopback/core, @loopback/repository, @loopback/rest and |
| 11 | + |
| 12 | + - @sourceloop/core as direct dependencies instead |
| 13 | + |
| 14 | + - - the peer on @sourceloop/core could not be resolved in consumer |
| 15 | + |
| 16 | + - monorepos where @sourceloop/core is a local workspace package, which |
| 17 | + |
| 18 | + - made npm error with ERESOLVE and blocked npm audit fix from running |
| 19 | + |
| 20 | + - - the peer was introduced in 9.1.0; releases up to 9.0.0 declared no |
| 21 | + |
| 22 | + - peerDependencies at all, which is why the failure appeared only after |
| 23 | + |
| 24 | + - consumers moved to ^9.1.0 |
| 25 | + |
| 26 | + - GH-173 |
| 27 | + |
| 28 | + - * fix(deps): override undici to clear trivy reported vulnerability |
| 29 | + |
| 30 | + - - add an undici ^6.27.0 override so the transitive copy resolves to a |
| 31 | + |
| 32 | + - patched release instead of the vulnerable one trivy flagged |
| 33 | + |
| 34 | + - - regenerate package-lock.json to apply the override |
| 35 | + |
| 36 | + - - verified locally with the same command and config ci uses, |
| 37 | + |
| 38 | + - trivy fs . --config trivy.yml, which now reports no fixable |
| 39 | + |
| 40 | + - high or critical findings |
| 41 | + |
| 42 | + - GH-173 |
| 43 | + |
| 44 | + |
| 45 | +Clink on the above links to understand the changes in detail. |
| 46 | + ___ |
| 47 | + |
1 | 48 | ## Release [v10.0.1](https://github.com/sourcefuse/loopback4-audit-log/compare/v10.0.0..v10.0.1) June 30, 2026 |
2 | 49 | Welcome to the June 30, 2026 release of loopback4-audit-log. There are many updates in this version that we hope you will like, the key highlights include: |
3 | 50 |
|
|
0 commit comments